Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
File: eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft (raw, json)
Hash identifier: sU2jYxs1k23V6T0bu1yDk7CdLSLkN6D0iLYuHoX21UU=
Subject key identifier: 64:F5:6B:25:C5:E0:0E:80:78:49:2B:FC:3B:A3:72:6F:71:13:98:85
Authority key identifier: 78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
Certificate issuer: /CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Certificate serial: 0197B77C4097AF349AC457436821DBF11EB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
Manifest number: 12F6
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl (hash: oJ9/3OVhYcpu1399Lv+XyStMPouJt1eiAcjymcw4dHs=)
2: vchHJIw7jZ4Wv-xZM5fwqPOc5MI.roa (hash: FaIi1AdW4pumZbm44kEE9unKxXXirWba//1QTHPOeME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:97:af:34:9a:c4:57:43:68:21:db:f1:1e:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=787aac71f17ef033cb6536795338fdc7bc0f2263
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=64f56b25c5e00e8078492bfc3ba3726f71139885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:94:49:1c:d1:33:a9:7b:d2:8c:47:6d:a5:4a:
85:03:66:57:84:9e:79:fe:4c:80:e9:ae:45:69:bc:
b3:17:b2:bf:2e:97:79:ab:83:23:27:5e:b1:79:04:
7c:9a:00:bb:7f:86:25:e8:07:0a:bb:fb:eb:ed:bf:
4b:42:94:86:5a:45:bf:ee:ff:bb:0e:19:34:e6:a8:
15:a2:c7:cc:17:2b:ba:69:94:14:e3:11:f8:54:ef:
8a:20:27:b8:d6:43:9a:71:9c:9b:51:17:2d:c7:53:
e5:44:79:cf:0b:c8:92:1a:a2:02:aa:b2:96:f8:ed:
41:ed:0a:04:6e:e8:6b:3b:b4:da:72:6f:c3:f3:1a:
be:bb:e1:bc:f3:8c:8d:de:e6:d2:b5:38:65:f8:50:
81:42:ab:cb:41:df:d9:d3:d2:ad:ca:30:0e:26:be:
85:c8:81:6a:7e:3b:20:02:55:4d:a3:3a:b2:1f:36:
0a:1e:8c:d8:86:87:32:96:94:4e:e8:30:a0:82:6e:
6e:8e:f3:f7:d1:f4:a0:e4:f2:e5:6c:d4:23:8d:05:
d0:de:81:23:23:aa:82:bd:e2:81:dd:c2:c0:54:70:
16:98:0b:6a:2a:e1:49:ca:39:de:69:81:17:96:f9:
47:fd:4e:19:38:c4:86:b2:07:92:fe:c6:01:89:20:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F5:6B:25:C5:E0:0E:80:78:49:2B:FC:3B:A3:72:6F:71:13:98:85
X509v3 Authority Key Identifier:
keyid:78:7A:AC:71:F1:7E:F0:33:CB:65:36:79:53:38:FD:C7:BC:0F:22:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eHqscfF-8DPLZTZ5Uzj9x7wPImM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/85ddae-54a7-4e7b-96da-d12867b46733/1/eHqscfF-8DPLZTZ5Uzj9x7wPImM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d9:2e:6f:d2:3f:7f:6f:3c:4a:db:08:bc:fb:e1:e1:7d:7b:
0a:2b:72:5f:06:6a:16:43:fd:99:62:09:a9:42:39:9a:55:1a:
d6:b9:9d:25:db:20:16:e5:4e:32:c2:b0:46:93:ae:16:eb:46:
e2:98:eb:97:7b:b9:42:cb:c0:91:28:d6:fe:ec:c2:20:7b:88:
fb:b4:59:67:62:a0:36:ad:14:dd:2f:83:0d:22:bf:74:5f:52:
0d:99:5c:86:99:a5:e3:c3:34:3e:62:78:d7:c4:8d:39:37:94:
d8:cf:95:71:b1:85:a1:dc:c1:d3:ef:a8:53:5b:af:8d:d1:b3:
11:74:6f:85:7a:52:e1:6c:aa:49:b9:d3:bd:45:66:fd:30:fc:
1d:75:ab:b8:39:c1:b6:ef:9c:75:38:53:1b:21:06:fb:15:a3:
72:8f:a0:bc:93:02:50:a3:86:41:07:90:83:17:a0:10:dc:34:
23:f5:53:32:26:22:a6:61:55:76:af:22:35:1c:e6:36:c2:48:
b8:f1:85:ad:34:80:90:43:0b:9d:58:f0:59:7d:82:5b:a5:9d:
d6:0b:ec:c1:f6:00:ac:8e:00:35:eb:1d:9b:cd:49:e2:4e:0b:
4e:4f:50:64:d4:b8:3b:4d:14:b9:fc:63:98:56:af:74:0b:af:
19:73:df:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:12 2025 by rpki-client